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ROYBOT INTERNATIONALLY CONVERTIBLE AND COMPATIBLE MACHINE CODE SYSTEM 


The following four programs are supplied: 


Assembler BASIC driver Assembler aachine code 
Test BASIC driver Test sachine code 


The drivers are written in BASIC to provide the internationally 
convertible and compatible features, whereby any information appear ang on 
the screen can be easily converted to a different language and any output 
can be directed to any channel that can be driven via BASIC. Special 
characters can be constructed by user defined graphics, as shown in the 
Spectrum manual, or by using the assembler: a range of French, German and 
Scandanavian characters are predefined in the software and can be entered 
in the progras by using Graph Shift a to s. Machine code is used where 
speed is regu eae Such as on asseebly, pape a testing and output 
apna he software is driven by sisple menu selections and proapted 
input, making it very easy to use. 


The @icrodrive and disk versions have an additional auto-run prograg which 
has facilities for user defined character design. 


ASSEMBLER SUMMARY 


The assembler has been written Per theubarly to suit beginners but it is 
also suitable for professional software, such as that produced by RDYBOT. 
Asseabler input is in the lower case forsat given in Spectru@ sanuals and 
is entered in BASIC REM lines, with aultiple instructions per line, if 
Tequired: this aeans that there are no new coaplex cont procedures to 
be learnt, input files can be prepared on a Spectrum without needing to 
load special software and ee eee listings can easily be produced. 
An exaaple of the similarity to BASIC, using line number labels, is: 


18 LET a=18:605UB 20:50T0 38 = 16 REM ld a,1@scall Ledsjr L398 
28 LET a=at18@:RETURN 28 REM add ay 180;ret 


Alternatively, naaed labels can be used and comments added: this allows 
easier line renusbering and built in docuaentation: 


1 REM NUMBER i;defb 18 

2 REM NUMBER c;defb 198 

18 REM STARTs1d ay(@NUMBER 1)31d byasld a,(@NUMBER 2)3call OADDEM; jr @NEXT 
28 REN ADDEMsadd a,b;ret 
36 REM NEXTsComaents can be added as this 


Various menu controlled utility prea ce are provided for meraral and 
deleting input lines, saving assembled code, erasing and cataloguing files 
for tape, disks, aicrodrives or RAM disks. 


The asseable menu allows al) or selected lines to be assembled, assembly 
with or without listing and listing or label addresses to screen or 
printer. The code is always asseabled to address 53888 onwards, but this 
is only used for relative addressing purposes, the final address being 
Selected a5 a menu option. ee agseeh ly input codes can be split into two 
or more sections and asseabled as one through the process of merge lines, 
asseable, save code, delete lines, merge new lines, continue asseably, 
Save new code and so on. The various sections of code can then be leaded 
te the real addresses and saved as one code file. 


Lines 1 to 2068 are used for asseabler input lines. An exaaple of size is 
489 input lines, with an aH of & instructions per line, could occupy 
28,068 bytes and generate 4896 bytes of code. This would be assembled in 
about 75 seconds. The gemory is used as follows: 


Below 33980 BASIC driver and input lines 

33608 - 57249 Asseabled machine code 

57258 - 61251 2688 label addresses 

61252 - 65367 Assembler variables and aachine code 
65368 - 65535 User defined characters 


TEST SUMMARY 


When the TEST program is loaded, a display appears, showing the computer’s 
register contents, stack, flags, selected sia last and neat 
instructions with addresses. Underneath the menu options are shown. In 
this aode, the program is ready to accept assembler instructions: typed in 
one at a time for the beginner to learn all about machine code, in 
conjunction with the sanual supplied. The menu options are: 


1 Exit - this goes to a second menus allowing code to be loaded from tape, 
disks, microdrives or RAM disks and also to disasseable it. 


2 Step - this allows the code te be stepped and executed one instruction 
at a time, showing what effect it has on the registers, ee stack etc. 
Also, at any time, new asseabler instructions can be typed in to change 
the values. 


3 Run slow - this steps through the code automatically at about 5 
instructions per second, showing changes in register contents etc. 
dynaa@ically. 


4 Run fast - this steps at about 38 instructions per second but only 
displays instruction addresses until a stop is reached or the space bar 
pressed, when the full display is given. 


5 Run CLS - this is the sage as 4, without address display, and is 
provided to test programs producing screen output. 


6 Backtrack - this allows the last 5 instructions and their effects to be 
replayed. 


! ee - this switches al] the displays between deciaal and hexadeciaal 
or@at, 


8 Binary - this allows the contents of one selected register/pair to be 
displayed as binary. 


9 Start address - allows selection of a new start address for the next 
instruction to be executed. It can also be used to step one instruction at 
a time without execution and showing disasseabled instructions. 


19 End address - slow or fast trace will stop when the selected end 
address is passed. 


11 Breakpoint - tracing will stop when an instruction exactly at the 
breakpoint address coses up next for execution. 


12 Memory display address - this can be for any 8 bytes of Real 
Initially, it displays a buffer area showing the code produced by 
instructions typed in directly. 


13. Real address - initially, the program can be used for Pie or 
disasseabling code at a real address e.g. the 48K Spectrua ROM. Selecting 
13 will switch to virtual mode, so that code loaded can be ceareg a5 
being at a different address e.g. code assembled to start at address 
cee Pree or whatever, can be tested as though it was loaded to the 
Teal address. 


14 Step calls - normally subroutines are stepped at the slow rates, but 
selecting 14 can cause subroutine calls to be executed at the full rate of 
up to nearly 1 million instructions per second. Using real addresses, any 
depth of calls will be executed correctly. Using virtual addresses, only 
the first call can be executed correctly as address conversion cannot be 
carried out for subsequent ones. 


15 Print - this sends the output to the printer and shows register 
contents, instruction address and anemonic code as programs are stepped or 
when a trace stops. 


The eeaory is used as fellows: 


Below 932888 BASIC driver and variables 
32889 - 49949 test and disasseabler machine code 
48958 - 44999 assembler for direct input 
45088 - 65347 sachine code to be tested 
65368 - 65535 user defined characters if required 


Code to be tested can be loaded below 45888, as low as 486958 but, if this 
is selected, direct instruction input is disabled. 


LOADING THE SOFTWARE 


The tape version has the test software (test.bas & test.bin) on one side 

and asseabler (ass.bas & ass.bin) on the other. To load and start, reset 

the cosputer and use the usual LOAD "". Program test.bas can be loaded via 

gh aareen se! aenu but to load the asseebler always reset or type CLEAR 
irst. 


The aicrodrive and disk versions have auto-load programs "run" and "disk". 
For the former, enter NEW {select BASIC on 128K) and enter RUN. On the +3, 
Select “Loader” to load “disk”. The main software can the be loaded by 
selecting aenu options | or 2. 


COPYING THE SOFTWARE 


On receiving the software, a copy should be aade for normal use and the 
cle el stcred in a safe pares In line with the design objectives of 
putting the user’s requirements first and easy conversicn for other disks 
etc., the software provides facilities for making the copies. Please do 
not abuse this user friendly facility for making a ieta) copies for 
others: as the purchaser, you are only licensed to make extra copies for 
your own use. 


To copy the TEST Basic and code, on loading, select aenu option 1 EXIT 
(press ENTER), then 4 SAVE ROYBOT from the second menu. Tape, RAM disk or 
drive can the be selected, as appropriate, the drive number or letter 
being requested for the latter. 


copy the asseabler Basic and code, on loading, select menu option 4 
SINE, then 2 ROYBOT code/BASIC, followed by tape etc., as above. 


The gicrodrive loader can be saved by selecting menu option 3. On the disk 
version this option copies all the software to another disk. 


CONVERSION 


All variables that are displayed are declared at the start of the BASIC 
drivers (TEST lines 28-459, ASSEMBLER lines 2828 to 2568, LOADER lines 28 
to 238). These can be changed by the user to teras that he understands 
better or to a different yanguage. To assist in the latter, Graph Shift 
characters a to s have been defined te represent special French, Geraan 
and Scandanavian characters at the end of the asseabler code: these can be 
changed as shown in the exaaple in the asseabler section or via the drive 
auto-load prograa. The code (65348 to 65595) can be saved and loading 
arranged for use in the TEST program (automatic with auto-load) but care 
aust be taken that the area is not overwritten by aachine code that is 
being tested. The length of the words displayed is limited by the 
disensioned oe which cannot be changed (see TEST line 1688, ASSEMBLER 
4388, LOADER 998). 


If it is necessary to initialise a channel, send special characters to a 
printer etc., it can be arranged by selecting INITIALISE from the 
secondary TEST aenu or the aain ASSEMBLER menu: these GD TO 468 and 2588 
respectively, where additional BASIC statements can be included. 
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All accesses tc tapes, disks etc. follow the variables, at the start of 
the srograms, and can be changed for other devices. The BASIC lines are: 


ve Drive RAM Disk 
TEST loading code 498 589 518 
saving RUYBOT software o44 suo 368 
start line to load test code 588 598 680 
ASSEMBLER loading BASIC program See 2628 2638 
26 


merging input lines 265 2468 
Saving assembled code 2768 8 8=6ecbbe = 2A 
saving ROYBOT BASIC and code 2748 862728 §=— 2798 
saving all BASIC e768 = 277 2708 
start line to load code 2799) = eBaB 2788 
CATALOG cB3é = 2B48 
ERASE Tile 2868 2876 


For drive identification, n$ is used for a letter or VAL n$ for a nusber. 
For the drive autcloader, lines 278 to 388 and 356 to 39% can be changed. 


ee is carried out using LPRINT at lines 428 to 638 for TEST and 2988 
to 3988 for ASSEMBLER. These can be changed to print statements peculiar 
to certain interfaces. 


THE FROCESSOR 


The heart of the Spectrum is a sicroprocessor chip known as a 289. This 
has its own internal fast memory elegents, known as registers. Registers 
aybeCyds@yhsl can store one 8 bit byte of value uN to 255 (see Spectrus 
manual Binary and Hexadecimal). Some of these can be combined to give 1 
bit words of value up to 65535: they are bc, de and hl. Other registers, 
ix, ly and Spy can only be used for words. The size of the words liaits 
the amount of main aemory that can be accessed by the processor to 65936 
(@ to 65535) bytes. 128K bette work by switching this range of accessing 
connections to different blocks of memory. 


The 2B@ has over 708 different machine code instructions. Most of these 
are quite simple, loading bytes or words between registers or registers 
and memory, manipulating individual bits, GOSUB and 6070 type instructions 
and simple arithmetic operations. 


The 8 bits of a special register (f), which can also be combined with a to 
give af, are used aS flags. These give an indication of the effect of 
certain operations, such as result of zero produced. 


The processor requires an area of memory to be set aside as a stack, the 
address being contained in the sp register. Words are inserted at the top 
of the stack by using push instructions and the last entry removed by pop. 
The stack is also used automatically to provide the return address on 
Calling subroutines. 


TESTING FACILITIES 


Load “test.bas* and follow the ioe exaaples, which deaonstrate how 
to use the facilities. On loading, all the registers, except IY, are set 
tu zero and displayed at the top left of the screen. IY is given the value 
normally used by the Spectrum ROM of 23619 or the address of system 
variable ERR NR (see Spectrum manual). The bey de and hl register contents 
are shown for the register pairs and byCydse@shyl separately. At the top 
rigit, the stack contents are shown for the last 3 entries. where the 
whole word and each of the two bytes are shown. The stack pointer (SP) 
value is the one used by the ROYHOT software. 


The status of the flags is shown underneath the oe Under these 
“was” shows the address and asseably input code for the last instruction 
executed and "next" the one to be executed next. Finally, across the 
middle of the screen, 4 words (8 bytes) of memory are displayed. 


The following demonstrate use of the software. Follow the instructions 
carefully until you are used to using the software a5 it i5 50 easy to 
cause the system tc crash or NEW itself when using machine code. 


HEXABECIMAL 


eels 7 and ENTER switches the displays between decigal and hexadecimal 
format (see Spectrum manual for explanation). 


BINARY 


Initially, the binary values of the af register pair are displayed at the 
bottom right of the screen. Entering 8 provides a prompt for a different 
Aa a ceaneres type iy and ENTER, noting the changes then repeat to 
reselect af. 


DIRECT INSTRUCTION INPUT 


Except when in the middle of one of the menu option procedures, the 
software will accept and execute instructions typed in directly. On 
loading, the seaory display shows a buffer area where the aachine code 
rumbers are inserted for instructions entered from the keyboard. Typing in 
the followings one at a tiae with ENTER, demonstrates the ae a s. The 
beginner should go to the section "TEACH YOURSELF MACHINE CODE ON-LINE” 
after trving these. 


Instruction Code Result 


dec til 93 hl becoges 65535, h and | each 255 

push hl 229 the hl values appear on the stack, No. on stack = 1 
pop de 209 «de becomes the same as hl, stack is eapty 

add hl,de 925 hl becomes 65534 and the carry flag is set 

ld as65 62 65 a becomes 45, the flags are not changed 
BACKTRACK 


Enter 6 to playback the above, observing the same effects, pressing ENTER 
for the next instruction. 


START ADDRESS 


Enter 9, then 16 in response to the request for the start address. Note 
that the next instruction to be executed is at address 16. This is a 
restart routine (rst 146) in the Spectrum 48k ROM which displays the 
character in the a register. 


STEP 


Enter @ and observe that the instruction has executed and becomes "Was". 
Next press ENTER 4 or S tises and note the effects of further executions. 


RUN SLOW 


Enter 3 to trace through the code slowly. After about 45 seconds the 
letter A will be formed in the bottom left hand corner of the screen. The 
prograg wil] stop with an “INVALID OP." sessage, meaning there was no 
return address on the stack to go to. Enter 3 new instructions - Jd a;,65 
Id besté push be -. Select 4% and enter start address 16 again, then 3 
Slow trace. This time the A is displayed, followed by another character as 
the return picks up address 14 for a second pass. If some other value had 
been left on the stack, it is possible that the system would crash. 


RUN FAST 

Select 9 and enter address 16 again, then 4 to run fast. Repeat but press 
the space bar when execution has started, noting that the full display is 
given on stopping. Enter 4 again to coaplete the routine. 

RUN CLS 


Select 9 but for the address input H19 (hexadecimal for 16). Then select 5 
to run through the code with the screen blank. 


BREAKPOINT 

Select 11 and enter address 2688. Select 9 and address 16 again, then 4 
for fast trace. Enter 4 again (or 2,3 or 5) and the oe executes until 
the breakpoint is reached again: then 4 again to go to the end. 

END 

Change the breakpoint address back to 8, 18 End to 5676, start address to 
16 and 4 to run fast. The execution stops with an end message. This tiae 


selecting 23,4 or 5 does not lead to any further instructions being 
executed. Change the end address to 65535, then enter 4 to continue. 


MEMORY DISPLAY 

Select 12 and enter 23635. This is the address of the system variable 
PROG, the oe) prey the start address of the BASIC prograa. The 
fourth word shows the end of variables E-LIWE. 

STOP AND CLEAR 


In order to restore the seaory display to its original value or to reset 
all displays, select 1 Exit then @ Stop. Type RUN to restart. 
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ENTERING A PROGRAM IN TEST MODE 


If you know machine code you can type in a short prograa in the TEST 
routine. Type in ld ix,45888 ld (ix);2B85 1d Cixt)),188 ld (ixt2),234 and 
note that the "Next" instruction gives call 68084. Then type ld (ix+3),281 
(return) Jd (ixt4),43 (dec hl) ld (ixt5),281 ld ay2d) ld (68804),a te 
return at 68884). Next select 2 and step through the program, noting that 
it calls 68094 and returns. 


RELATIVE ADDRESSING 


Absa) entering the above prograg, select 9 and enter address 40006 
then option 13 to change the real address from “YES" to “NO: this resets 
all displays and the next instruction will show call 68084 at address 
59080. Select 2 and step through the progrags noting that it executes the 
dec hl instruction that was inserted at qdirees 45004. 


The above demonstrates the relative addressing capability where code can 
be loaded to address 45888 onwards and tested as though it was at another 
address. One exception is where prograas being tested refer to an address 
nee 16384, in the ROM, where no adjustment 15 @ade and the real address 
used. 


The address offset calculation is carried out when real address "NO" is 
selected, assusing that whatever is at the selected start address is 
really at address 45088. Once the offset is calculated, the start address 
can be changed for testing to start anywhere within the code. 


LOADING CODE TO TEST (AND CRASHING) 


Jo load code; select 1 Exit, 3 Load code and menu selections according to 
whether the code is on tape, drive or RAR disk. As an experiaent, load the 
assembler machine code “ass.bin", selecting address 49888 when peaapred 
This code is normally Joaded to address 61368 so select this as the start 
address, then 13 for real address "NO" (or to "YES" and back to "NO"). 
Then select 2 and step through the subroutine call. If it is wished to 
demonstrate a system crash, continue Sree as noting that the bc register 
is loaded with a value greater than 68880. This i5 used as the length of 
the ldir copy instruction and executing this will sove most mesory 
contents up one location. If this is done, the svstem will have to be 
reset and software reloaded. 


LARGER MACHINE CODE PROGRAMS 


Code for eu can be loaded below 45866, down to 48958, that is about 
24008 bytes. owever, this disables the direct instruction input 
capability. 


To use the relative acoreeh nd facility, it is necessary to calculate the 
offset froe 45808. If code is loaded to 49958, the offset is 45088 - 48958 
or 4858. As an exaaple, if the real code address was 30888, select start 
address and input 34958 (real address + offset), then 19 for real address 
"NO". Selecting a new start address of 306088 wil) aa "Next" as the 
ie loaded. For larger programs see DISASSEMBLING GAMES 


STEP CALLS 


beaedae when a subroutine is called, it 15 stepped or traced as the main 
code. When testing code is loaded to real addresses, subroutines can be 
executed at full processor speed. To demonstrate. select 14 to change step 
calls to "NO" then, as for the earlier demonstration, input start address 
16 and 2 to step through the code: this tiae the end will be reached after 
12 steps, without eda. through the call. Similarly, instructions typed 
in directly will execute at the full rate: try call 16. Select 14 to 
change to step calls "YES". If relative addressing i5 used, any subroutine 
called gust not call others as the address cannot be calculated. 


ERRORS 


The error display appears in the middle of the screen under the memory 
display. Besides giving an indication when breakpoint cr end address is 
reached, the main message on testing is “IKVALID OP". Assembler errors are 
covered later. Certain instructions will not be executed 0 halt, ld 
spyNN. reti, ig Nor ret and pop, if the stack i5 empty. The software will 
not execute a conditional return if the stack is empty, even though the 
return is not appropriate. Jo overcome this, the address cf a return 
instruction can be put on the stack (e.g. type in instructions ld hl,82 
and push hl). An example to demonstrate this 15 a ROM routine which finds 
the start address of any BASIC line - select start address H194E then type 
in Id hl,28 (the line nusber), then select "Run slow". The program ah 
stop with both hl and de registers pointing to the start address of the 
first line. Reselect the start address, put 82 onto the stack and 28 into 
hl, then repeat the trace. This time, de points to the start of line 18 
and hl to the start of line 2g. 


PRINTING 


If a printer is available, select 15 to change print to "YES" and repeat 
the step address 14 procedure with step calls "NO". The state of the 
registers etc. should be printed after each step. Repeat with run fast and 
printing should occur when the trace stops. 


If the printing does not work see CONVERSION as it aay need initialising 
or different print statements. 


DISASSEMBLY 


To disasseable from the test screen select the start address (e.g. @ for 
the start of ROM), then enter 9 again for start address and keep pressin 
ENTER to display sequential addresses and instructions as "Next" an 
"Was". To end this, enter an appropriate start address. 


For a listing ee disasseably, select the start and end addresses te ' 
and 28), then 1 Exit and 2 Disasseable. If an end address is not selected, 
following the scroll indication, rather than et ENTER for the next 
screen, press BREAK or the space bar and type RUN. 


To print the disassembly, select 15 Print before exit to the second senu. 
If hexadecimal format is preferred, select 7 Dec/Hex also. 


DISASSEMBLING OTHER ROMs 


Other ROMs can be disasseabled by using the save routines provided in the 
ROMS. For exagple, on the Spectrus +2, exit from the test and select STOP. 
Then type save | "rom" code @,16384 then RUN. Select 1 Exit, 3 Load code, 
3 RAM disk, name "rom", address 45088. peti the microdrive Interface 
1 ROM can be saved by save #"a"s1s"rom" code 8.8192 (or one of the +3 ROMs 
by save "grog" code 816384) and loaded to 45888. The ROM can then be 
disassembled from address 45888 but note that relative addressing cannot 
be used to display the real addresses, as they are below 16384. 


DISASSEMBLING GAMES FROGRAMS 


Breaking into games programs is a science in its own right and the author 
of this software is not an expert on the subject. However, some 
experiments have been carried out to provide a starting point. Anyone 
attempting this will at least need to absorb the detail given in the 
Spectrum manuals on Beret & systea variables and ea machine code. 
Following the detail of the demonstration of finding BASIC line nuabers 


(see ERRURS) will also help. 


The pe start by jean a BASIC pean usually quite short. These 
usually set RAMTOP (using CLEAR address), load code above this address, 
often preceded by loading a screen by load SCREENS or load code to 16384, 
This may then be followed by a USR address statement to start running the 
gachine code. The first steps for disassembly are to find the RAMTOP and 
USR addresses and to load the code without executing the USR stateaent. 
Sometimes it may be possible to load the BASIC program and stop the tape 
before the ee load is started and delete the USR statement so that 
the systes will stop after loading the code. In sany cases the BASIC 
loaders are written to prevent them from being listed, machine code may be 
eabedded to control non-standard tape loading, system variables poked to 
make the system crash and so on. Exasple programs, which will allow these 
BASIC loaders to be cracked are given later. 


Once the code is loaded, it can be saved in two or aore parts for 
disassembly later. The code {or data) usually starts at around address 
24088, so two parts could be, Say, 24808 to 48804 and 48604 (leave some 
overlap) to 65535. These can then be loaded in turn by the TEST prograa. 


ASSEMBLER FACILITIES 


Asseabler input codes are entered in BASIC lines 1 to 2868, with a REM 
statement at the start, using the normal Spectrum editing facilities. The 
codes are entered in lower case format a5 given in Spectrua ganuals. 
Multiple instructions can be entered in a line with semi-colons between 
thea. The codes aust be exactly the correct foraat without extra spaces, 
or an error aessage will be given and the codes not asseabled. The lines 
can be typed in with or without the asseabler being leaded. 


One byte variables, Noor DIS, and 2 byte variables, NN, can be poe 
(no sign) decigal or hexadeciaal nuabers or characters. The offset, D, in 
certain ix or iy instructions can be decigal or hexadeciaal, in the range 
-128 to +127. Hexadecimal numbers have the prefix H and letters aust be 
capitals. Characters have a prefix C ; , 
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Load the assembler, select @ to stop and enter the following lines: 


18 REM 1d by@S431d asCXs3ld hl »Cabsld desOjld ix,28488 


2g REM ld byHFEsId a,SB;ld hlyHblb2s]d desH@s ld ix sH5Ods 
30 REM ld ay(ix-128) sd (ixtl27) SHEA Id (iy-HIG) yCn 


Rather than using real addresses for call and jump instructions or a one 
byte variable for jr DIS and djnz DIS (e.g. call 54288; jp 551233 jr 
zs34:djnz 258), a BASIC line number can be used as a label “ik a prefix 
L. the assembler deteraines the address or. in the case of DIS, the 
displacement values (-126 to +129 from the instruction start address). 
Similarly, a line number can be used as a NN variable. Add the following 
to the lines typed in: 


49 REM call LiGsjp nz Led; jr ncsLassdjnz L48sld hl Lissjp (hl) 
The latter give the same effect as jp L1@. 


Besides standard 28@ instructions, a nupber of additional ones are 
provided to preset variables in memory. These are defb to define a byte, 
defi to define a byte in binary, defw to define a word, defc to define a 
string of up to e255 characters and defs to define a nuaber of bytes of 
meaorys initially zeroised. Note defb, 1 and wcan be typed in during TEST 
to display the value for conversion purposes. Enter: 


56 REM defb o5:defb Ca:defw 1294;defw HFFFFsdefc “String” 
6G REM defs 10Bsdefl 19101918 


A further function, defl, i5 available for defining aemory addresses to be 
referenced by a machine code prograg. These can be used for various 
purposes and have a for@at as shown in the following examples. The first 
example gives an unused line number label the same address as an existin 

line to enable successful asseebly or to allow the code to be teste 

before code for the new line is written. The second two exaaples can be 
used to define frequently used addresses which may be changed, for example 
when a long program is assembled as a number of parts. 


76 REM defLi8@ LidsdeflL! 45928;defLe HASFE 


It is usual to include the defL stategents at the start of programs 
defining lines which are otherwise unused. 


The advantage of using line number labels is that it is easy to find the 
code referred to. The disadvantage is that lines cannot be renuabered 
without checking whether there is a reference to thea. Named labels can be 
used instead of orf as well aS line number labels, the advantages being 
that line renumbering is easier and, along with comments, they provide 
built in docuaentation. 


Hamed labels and comments aust start with a capital letter and can be up 
to 9 and 15 characters respectively. If they are greater than this, only 
the first 15 will be displayed. Labels aust be placed as the first entry 
on a line, otherwise they will be treated as comments. They can be on a 
line with no other instructions, otherwise separated by a semi-colon. 
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References to named labels aust be preceded by a @ symbol. Examples are: 


BO REM Nemoryidets 2o@;Qutput area 

99 REM Count {sdefw 258 

108 REM START 

118 REM ld hl@Memorysld be, {a@Count 1) 

129 REM Loopsld thl)s@sinc hlydec besld asbsor cyjr nz,dLoop;Zeroise 
138 REM This is a valid line for documentation purposes. 


ASSEMBLY 


eon the assembler is loaded for the example lines to be typed in, 
enter KUN then select 1! Assemble from the main menu. To check that the 
typing 15 correct, select 6 Start assembly. The address 53886 will flash 
at right of the chosen entry. Press ENTER te continue or the space bar and 
ENTER to cancel the request. If all are correct, two passes of the 
assembler will be executed with the addresses and line numbers bein 
displayed. If an error 15 founds an automatic listing 15 given from that 
point. For a full listing, before assembly, select 3 List on assembly, 
then 1 to cancel, @ to display or 3 to print. 


A selection of lines can be assembled by a a the first and last line 
Tuabers (options 1 and 2). The prograa will not allow a second line nueber 
to be selected which is less than the first. 


LABEL ADDRESSES 


Following assembly, label and line number addresses can be displayed or 
printed via assemble option 4. The label information stored is the start 
address of each line used. Named labels are not stored but are picked up 
from the input code lines as the display is given. The addresses are 
stored until a new start asseably option is chosen but, if the input 
program has been deleted, the label names will not be displayed. 


ASSEMBLER RELATIVE ADDRESSING 


The code i5 always assembled to address 53888 onwards but the start 
address can be selected according to where the code is finally to be 
loaded. The assembler calculates label addresses, used by calls and quate 
and code addresses for listing as the final ones. This can be desonstrated 
by selecting different start addresses, assembling with listing and 
displaying label addresses. 


ASSEMBLING LARGE PROGRAMS 


Programs, where the a lines are in two or gore parts, can be asseabled 
and combined with the second or subsequent parts calling or jumping te 
code in earlier parts, providing different line numbers are used for each 


part or, at least, those referenced are unique. 


After the first part has been assembled, the continue address is 
calculated as the starting point for the next code: this can be changed, 
if required, by eee option 7 and entering the new address. cetera 
B continue assembly will assemble the next part, calculate the new labe 
addresses and ie up references to lines already asseabled. Where only 
line number Jabels are used for the cross references, the procedure is 
automatic. 
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As named labels are not stored forward, they can be redefined at the start 
of subsequent parts: for example, a routine called FIND at line 1288 in 
part 1 can be referred to as 18 REM FINDsdefLi@ Licéé. If 1200 REM FIND 
were used again, the address would be redefined with a wrong value. 


The ROYBOT assembler is assembled in two parts and has 8 named label 
Teferences from part 2 to part 1. The following demonstrate how it was 
asseabled, a5 an indication of how to deal with large prograas: 


1) Merge “assli", select asseable, start address 61380, select start 
assembly, print label addresses (for reference by BASIC), select save 
code, save as codel then delete lines 1 to 2608. 


2) Merge "assle", select asseable, note continue address, select continue 
asseably, print labels for second part, save code as codec. 


3) Select step, manually load "codel" 61388 and load “code2" to continue 
address then save "ass.bin" 61388,4236. 


INPUT LINES 


Lines 1 to 2098 are reserved for the REM input lines and 2891 to 5889 for 
the BASIC driver. Lines greater than 5888 can be used for other purposes, 
such a5 a short BASIC program for testing machine code just asseabled. 


MERGE LINES AND BELETE 


The input lines can be entered without the assembler being loaded and 
ae later by selecting opticn 3 merge lines. After assembly, some 
or all of these can be deleted by selecting 5 delete, then 3 delete 
selected lines. If it has been necessary to modify the input lines, 
different options are available for saving then. 


If it is decided to keep the put lines as separate see ae ee 
select S delete then 4 ROYBOT lines. The ROYBUT BASIC will be deleted and 
the system will stop with a “Nonsense in BASIC" eee Insert a new line 
(75688) to save and verify the lines and, initially, to erase the 
ae if necessary. Then type RUN to save the program. The new line 
will be included in the save and on aerging, loaded for future use. DO NOT 
SAVE WITHOUT ENTERING RUN OR CLEAR OR THE SYSTEM WILL CRASH ON MERGING. 


SAVE AND LOAD 


One of the save options is to save all BASIC lines. This can be used as an 
oe approachs saving the asseabler BASIC and input lines together. 

a long das prograa i5 produced, it will be observed that merging is 
ne slow. the save all BASIC option is used, the save will 
incorporate a restart line of 2@18, the start of the assembler. To reload 
and automatically run the software, after the assembler and machine code 
has been loaded initially, select 2 load new and input the nase of the 
combined assembly BASIC and input lines. This method is euch faster than 
using serge if microdrives, disks or silicon disks are available. 


The other save options are to save the assembled code from address 53080 


and the ROYBOT code and BASIC (see COPYING THE SOFTWARE). Load new can 
also be used to load the TEST software "test.bas". 
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UTILITIES 


Options 6 and 7 from the asseabler aain aenu are provided for producing 
a and erasing files from disks, wicredrives or RAM disks as it has 
been found that these functions are used frequently when new aachine code 
a paar being developed. For details of option 8 initialise, see 


128K SYSTEMS 


When using {28K systems, particularly those relying upon tape input, the 
a ol and input lines can be loaded and saved teeporarily in the RAM 
isk. 


ASSEMBLER ERRORS 
The following errors are detected and indicated on assembly: 


Syntax error ~ wrong characters typed, extra spaces etc. 

Number cut of range e.g. 255 for a 1 byte variable 

Distance for jr instructions too far or invalid (juap to itself) 
Line number or named label not found 

D value in ix or iytD too large 

Label name used previously 


Oo on oh 


Certain Spectrum systems will hang if adding BASIC program lines atteapts 

to cause the available memory space to be exceeded. The software checks 
for this and issue a warning message "too aany input lines". If this 

occurs, the pr oahee Should be split into two. On assembly, the software 
also checks that the machine code will not be assembled to a real address 

greater than 57249: if this is atteapted, the system will stop indicating 
Dut of memory". Assembling defs 4250 will demonstrate this. 


If a printer does not work, refer to the section CONVERSION. 


AUTO-LOADER PROGRAN 


The auto-loader program, supplied for disk and amicrodrive versions, 
provides menu selection for loading the assembler or test software, 
copying the software and designing user defined characters. 


On nea the asseabler code, containing predefined special characters, 
is also loaded. These will be in rat when TEST is selected. When 
character design is selected, the special characters are displayed along 


with a to 5, which are used for selection purposes. Entering a letter 
displays a large version of the character and a senu with @ Exit and: 


1 Design - a cursor can be #oved around and dots made white or black. 

2 a noreal or graph shift character can be displayed for comparison. 

3 transfers the character (even blank) in place of the selected one. 

If anything is changed another aenu is displayed, where @ Cancel rereads 
the original code, 1 allows another character to be selected and 2 resaves 
"asssbin® with the changes included. 
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TEACH YOURSELF MACHINE CODE ON-LINE 


Load TEST as described earlier and read sections “THE FROCESSOR" and 
"TESTING FACILITIES" before starting the following exercises. 


REGISTER LOADING 


The first group of instructions te consider are those which load registers 
with a constant. These are of the general format ld ryN where N is between 
§ and 255, and Id rrsNN where NN is between @ and 65535. Type in the 
A instructions in turny pressing ENTER to cause them to execute. 
Note that, as the instructions are entered, the code appears in the meeory 
display e.g. 62 1 for the first one: 


Id ayl Id bse Idcsd Id dol88 Id e,75 ld hyeS4 Id 1,255 


Note that the value in the be register pair is @5étbtc or 515 and 
Similarly for de and hi. To confirm this enter the aaa It can be 
chserved that the NN value in the machine code 15 the opposite way round 
to that in the registers, also that the ix and iy loads are the same as 
hl, except being preceded by 221 or 253: 


Id beySi5 Id des25675 Id hls65279 Id ixs65279 ld iy,65279 


The next group of 49 instructions copy the values of any one of the single 
letter registers asbycsdys@she] to any others and itself. Try: 


Id aya ld ayb Jd asc ld ayd ld ase Id ayh Id asl Id bea 1d cyd ld hel etc. 


There is no direct equivalent for EDPYIRG 2 letter registers but, for be, 
de and hl, this can be achieved by two loads e.g. ld hyd and ld l»e. For 
ancther methods particularly for ix and iy, see STACK PUSH AND POP. 


LOADING MEMORY CONTENTS 


All double length registers can be interchanged with 2 adjacent aemor 
bytes. Note that the meeory display starts at address 35923 and, wit 
instructions being 1 to 4 bytes cnt addresses 35927 to 35938 can be used 
to demonstrate mesory transfers. In the following examples note that the 
fuabers in @emsory are again in the reverse order: 


Id hly1234 Id (35927) sh) 1d dey(35927) Id ix,(35927) Id (35929), iy 


WARNING - these instructions can easily overwrite isportant seaory 
addresses, such as Systee Variables, and cause a crash. 


The only single byte register that can be used in this way is a: 
Id ay255 ld (35927),a 1d a,(35928) 
INDIRECT ADDRESSING 


Rather than using a nuaber for loading peaory contents, the address can be 
loaded into registers which are used for indirect loading. The hl register 
can be used in conjunction with a 1 byte number or any one of registers 
aypbyCeds@shyl. The folowing deagnstrate indirect addressing cf the 


attributes of the first character on the screen: 


-15- 


Id hl,225e8 Id cy(hl) Id 4979 Id (hb)ea Id th))s249 Id (h)dsc 
The be and de registers can be used, but only in conjunction with a: 
Id bes22528 Id dey2e529 ld as(bc) dd (de)ya Id a,79 Id (de)ea 

INDEXED ADDRESSING 


Indexed addressing is sisilar to indirect addressing but uses the ix and 
iy registers with a displacement in the range -12B to +127. The facilities 
available are identical to those for indirect addressing with hl] and, 
except for an initial byte of 221 or 253, the machine code is the same. 
The first of the following examples again deals with attributes and the 
second loads System Variable RAMTOP inte hi: 


Id ixy22656 ld bylix-128) Id (ix-128).249 Id (ix-128),b Id asfix) 
Id iy;23618 Jd ly (iyttes) Id hyfiyttel) - Note reverse order 


STACK PUSH AND FOP 


A push instruction stores a 2 byte register on the stack by subtracting 1 
from the stack pointer SP, storing the first byte, resubtracting 1 then 
storing the second byte. The instructions can be used for copying from one 
register to another or for teaporary storage purposes. Note the last in 
first out effects: 


push be pop af push iy push hl push de pop hl pop de pop ix 


The Spectrue software uses a number of stacks and, as in the ROYBOT 
software, private stacks can be created by saving the stack pointer (e.g. 
Id (35927),5p ) then loading sp in various ways. The latter are not 
implemented in the TEST software (sp to memory is) as they would cause a 
crash, but they are of the following general format: 


ld spyhl Jd spsix Id spyiy Id spyNN Jd sps{NN) ld (NN)ssp 


The stack 15 another dangerous area to play with ~ push or pop too many 
and something will be overwritten: pop too few and a crash is likely ‘see 
also JUMP, CALL AND RETURN). 


EXCHANGE REGISTERS 
The CPU chip has a second set of afsbc,desh] registers which can be 
exchanged. Some may be used by Spectrum ROM routines so it may not be a 


good idea to use them. They are iapleaented in the ROYBOT software by 
storing the values in memory. 


ld ayl23 ex afsaf’ ld a,2S5 ex af,af? Id de,12345 1d hl,9999 
ld bcy1888 exx Id hl,@ ld de,® exx exx exx 


Another instruction allows the hl and de ey Hae to be exchanged and 
ee pene the contents of hly ix or iy with the two bytes at the top 
a e stack: 


ex deyhl push de ex {sp)shl ex (sp),ix ex (sp)siy pop iy 
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1 AND R REGISTERS 


There are two other registers that can only be used in conjunction with 
the a register. These are the interrupt page register 1 and the sesory 
refresh register r. Loading values into these registers should be avoided. 
The instructions are - ld ayi Jd apr Ad isa ld rya 


BLOCK TRANSFER AND SEARCH 


These are some of the sost powerful and useful instructions available. Any 
megory area, within the O4K addressable range, can be copied to any other 
as a block transfer. The hl register has to be loaded with the source 
address, de with the destination and bc with the number of bytes to copy. 


There are two ways of copying blocks of semory to ensure that data is not 
overwritten when the blocks aia To copy a block to a lower address it 
15 necessary to start at the bottom, copy the first byte then increaent 
the addresses (ldir). To copy a block to a higher address, start at the 
top, copy the last byte then decrement the addresses (Iddr), The first 
example copies rubbish to the screen (watch the screen on pressing ENTER 
for Idir). The second moves the attributes of the top line. Note: with bc 
too large or § or addresses being wrong, the system will crash. The third 
exaaple uses the single byte copy instructions 1di and ldd, moving the 
instruction code and first 3 attribute bytes into the memory display. 


Id hl,8 Id de,16384 Jd beshl44 ldir ld de,@e527 Id bes6144 = Iddr 
Id hlye2529 ld des@25e8 id a,{de) push af Id beyd2 dir 1d @,3) 
Id 1,38 1d bey3! ddr pop af Jd (de)sa 

hl,22538 Idd ldd ldo 


(d 
ld hl,35923 Jd de,35927 Idi Idi Jd 
For block search instructions hl is loaded with the start address, bc with 
the nuaber of bytes to search and a with the character to be found. The 
search stops when bc reaches @ or a match is found. For the latter, the z 
flag will be switched on and hl points to the address following the satch. 
The single byte searches cpi and cpd compare a byte and increaent hl: 


Id ayCr Jd hls@ Jd beye cpir cpir cpdr cpi id e,(de) cpi cpd cpd 
INPUT OF CHARACTERS, HEXADECIMAL AND BINARY NUMBERS 


As used in the previous exaeple, characters can be loaded to registers 
using the prefix capital C. In order to understand many of the other 
instructions, a knowledge of hexadecigal and binary is necessary and the 
appropriate sections in the Spectru@ ganual should be studied. Hex nuabers 
can be loaded using the prefix H a ld a,HFF) or addresses in the Same 
format. As described under TESTING FACILITIES, aig option 7 switches 
between decimal and hex format for addresses and register contents. Also, 
selecting option 8 enables binary values to be displayed. 


Hexadeciaal and binary conversions can also be carried out using defb, 
defw and defi functions by direct input (see ASSEMBLER FACILITIES). The 
hexadeciaal digits declared can be ! or 2 for defb and 1 to 4 for defw. 
Binary defi declarations aust always be @ bits. Exaeples of def functions 
displaying numbers in the seaory display are: 


defb HA defb 18 defb HAB defw HIDE defw H9ABF defi 11118888 
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EIGHT BIT ARITHMETIC AND LOGIC 


Most of these instructions are in association with the a register 
(accugulator) and involve a variable, other registers, indirect addressing 
cr indexed addressing. The first grou of instructions are add, add with 
carry; subtract and subtract with carry. The carry flag 15 switched on 
where an add gives a value qpenley than 255 or a subtract gives a negative 
result. Load ae values in register and memory locations and input 
some of the following: 


add asa add ayb add ayc add ayd add ase add ash add asl add a,{hl} 
add ay{ixtl) add as(iy-129) add ayed ade asa adc asb adc a,99 etc. 
sub a sub b subc subd sube subh sub] sub thi) 

sub (ixti@8) sub (iyt45) sub 77 sbe aya sbe ayb sbc ayu etc. 


The next group of instructions are comparisons with the a register. Where 
the value being compared is equal to that in a, the zero Tlag z is set 
and, where it i5 greater, the carry flag c is set. 


cpa cpb cpec cpd cpe cph cpl cp (hl) cp (ixt46) cp 255 
Instructions are available for adding 1 (increment) or subtracting 1 
(decrement) from any register or seeory location (be careful to only 
change known locations): 


inc a incb incc inc d ince inch inc 1 inc (hl) ine (ixtl) 
dec a dec b decc decd dec e dech dec) dec (hl) dec (ix+tt) 


Three logic instructions, AND, OR and XOR are available, operating on 
Dae patterns in the a register. The results of carrying out the 


operations on each individual bit are: 
ANDO =8 G@ORS=68 @XORG9=8 GBAND1=6 GORL=1 O@XOR1=1 
LAND1=1 21ORi=1 1 X0R1=68 1 ANDB=68 1ORGB=1 1 XORB=1 


AND can be used for selecting bits; OR for combining and XOR for 
inverting. Load various nu@bers inte registers via the a register, such at 
176, 15, 248 and 255, noting the binary patterns. Then carry out a 
selection of the following instructions. 


and a and b and c and d ande andh and] and (hl) and {iy-22) 
or a or b to or (iyti86) xor a xor b to xor (iy-1e@) etc. 


An important function of these instructions is that they Clear the carry 
flag; "and a" and "or a” leave the a register unchanged; “xor a” will also 
zeroise the a register. The or function is often used for checking a 
double byte register for zero. 


FLAGS 


The flags can be all switched on or off olde using push/pop {ld e255 
push de pop af Jd e,@ push de pop af). The bits in f are: 


8 Carry flag (c) - see subtract above. 


1 Add/subtract {n) - this is switched off for adds and on for subtracts 
and 15 used with deciaal arithmetic. 
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2 Parity/overflow ip) - this is set by and, or, xor, if the nuaber of bits 
is even and reset if odd. It is also used to indicate overflow when 
ene with positive nuabers (see s flag) where carry is not set (try - 

ayi28 =o and a (no parity) add a,64 and a (parity) Jd ale? and a 
(raset p) add asl foverflow). 


4 Half carry th) - this is similar to carry except it i5 associated with 
with the lower 4 bits. It can be set by "and" and reset by “or“. The main 
use 18 in decigal arithsetic (see daa). 


6 Zero (z) - this is switched on by an operation giving a result of zere 
or am equal comparison. As other flags, it is not changed by loads. 


7 Sign (s) - rather than ie a byte to count up te 255 it can be treated 
as eng positive numbers @ to 127 or negative numbers -1 to -128, 
where -1 is 255 and -128 i5 128 {2°s complement). The sign bit is switched 
on when an operation sets bit 7 (e.g. 128) - try ld a,@ add ayt sub 129 
add asle? inc a. 


Bits 3 and 5 are indeterminate. 
BENERAL PURPOSE OPERATIONS 


Decimal Adjust Accumulator (daa) - this is used in conjunction with binary 
coded decimal adds and subtracts and uses the nm andh flags. It is 
difficult to understand but essentially assumes that al) numbers are 
decimal ne 117 or H75 is decimal 75. Try 1d ayH75 add ayHl daa 
(answer H91) add a,Hi@ daa (answer 1 + carry for 181) sub H33 daa 
{answer Hd8). 


Complement Accumulator (cpl) - this inverts the bits in the a register. 
Try ld ay! cpl (answer HFE or 254). 


Negate Accuaulator (neg) - this gives the 2’s complement value (see sign 
flag). Try ld ayi neg (answer HFF or 255 or -1). 


Complement Carry Flag (ccf) and Set Carry Flag (ccf) - note that there is 
no clear carry instruction but this is done with "and", "or" or “xor". Try 
scf anda ccf ccf ccf. 


SIXTEEN BIT ARITHMETIC 


These have the sage operation codes as for 8 bit instructions but there is 
a more liaited range. The codes are: 


add hl,bc add hlyde add hiyhl add hlysp add ix,be add ix,de 
add ix,ix add ae add iysbc add iy,de add iy,iy add iyssp 
adc hsbc (or de, hl, sp) sbe hlsbc (or de, hl, sp) 

inc be inc de inc hl inc ix inc iy inc sp dec be etc. 


Note two inc sp instructions drop a word froa the top of the stack but one 
gives invalid displays on TEST. The add sp instructions can be useful for 
chtaining a copy of a word on the stack: push 3 different values and copy 
the third to de by - Id hl,4 add hl»sp Jd e,(hl) inc hl dd d,thl) 
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JUMF, CALL AND RETURN 


There are two kinds of jump instructions jr (relative) and jp (absolute). 
The first has a byte displacement (DI5), which is forward @ to 127 or 
backwards -1! to -128 (255 to 128) from the start of the next instruction. 
The second kind have ae byte address (NN). When relative jusps are used 
the machine code can be relocated anywhere in meacry but has the 
disadvantages that the juap distances are not Hae great and lead to many 
assembly errors. As shown in ASSEMBLER FACILITIES, programs are written 
ceterring | to line number or named labels. The instructions can be typed in 
under TEST (e.g. y7 127 jr z.128 - note addresses) but de nothing other 
than display ane codes in the memory display. 


Juaps can be unconditional (as BASIC 6070) or conditional on the state of 
one of the flags. The instructions are: 


jr DIS jr csDIS jr ncsDIS (no carry) jr z,DIS jr nzsDIS (nen zero) 
jp NN jp cyNN jp ncyNN jp zsNN jp nzsNN jo pesNN (parity even) 
if po sNN (parity odd) jp @sNH (sign negative) jp pyNN (Sign positive) 


Next there are three indirect jumps jp (hl), jp (1) and jp (iy)s where 
the register holds the address to jump to (e.g. {i hl, 68888 jp thd) is the 
same as jp b0009). 


A special instruction, decrement b center and relative juap non zero 
(djnz DIS) is fe for loop control. It does the Same aS dec a and 
jr nzyDIS. Enter id by@ djnz 123 noting b goes to 255 (loop count 256). 


The next group are call and ret, for subroutines, which are the same as 
BASIC GOSUB and RETURN. The instructions can be unconditional or with the 
Sage conditions as jp instructions. The call instructions are 3 bytes 
long and the following address is pushed onto the age for the return. 
The noon Will demonstrate this - cal] 1@ Id ay} and a call nz»2d 
(called) call 2,4@ (mot called) ret (pop) ret z (no pop) ret nz (pop) 


Note that the return addresses on the stack prevent other itegs from being 
popped in a subroutine. However, the return address can be pepped into a 
register temporarily. The instructions are: 


Call NN call cyNN call mcsNN call zsNN call nz»NN also pe, poy a p 
ret retc ret nc ret z ret nz also pey poy m p 


The final two instructions in this group are return froa interrupt or 
non-gaskable interrupt - reti retn 


ROTATES AND SHIFTS 


There are again a large nu@ber of instructions which are used for rotating 
and shifting bits in any register or me@ory location. They can be used for 
ere at cr divide (by 2) 4 etc.), goving data from one byte te the next 
one bit at a time and for counting or checking bits within a loop. The 
following diagrags indicate the bit flow and can be demonstrated by using 
those associated with the a register and paser yin the binary values and 
carry flag. They are of the following general format: 


op a opb opc opd ope oph op] op (hl) op (ixtD) op CiytD) 
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netic a recdfse nkereg + boro 


Rotate Left and Right circular ric and rrc - these circulate the bits 
around a byte en the carry a as a1 bit is moved from one end to 
the other. An exagaple is rotating the first attribute byte to see which 
bits are set - Id hle2528 repeat rre (hl) 8 times. 


Rotate Left or wart tl or rr - these rotate through the carry bits 
equi 9 steps to return te the original value. An example of use can 
be seen by dices anti address 1489 to 1494, which is used for reading 4 
bits froa a eee Register 1 is set to 1 so, within the loop, carry is set 
on the eighth rotate left. Before rotate, a compare sets the carry flag 
when a | bit is read and this is moved into the register with the rotate. 


Rotate “a” register - instructions rlc a, rrc a; rlaandrra are 
available ina different fora which is quicker and only 1 byte long. They 
are - rica rrca rla rra 


The shift instructions are as follows: 


sla CCP HB sra bre srl sw) 


8 


Shift Left Arithmetic sla - the bits aove left into carry, fill with zeros 
and can be used for een by 2; 4 etc. over 1 byte or aore with rl - 
Id cyl Slac slac slac ld de,l175 slae rid slae rid 


Shift Right Aritheetic sra and Shift Right Logical srl - these move the 
bits right into carry, sr] filling with zeros and sra with zeros, if bit 7 
i5 "8" and with ones if bit 7 i5 "1". These instructions can be used for 
division. With bit 7 set the number can be regarded as negative (see Sign 
Flag) so sra can divide these. e.g. ld a,128 {-1¢8) sra a (192 or -64), 


Rotate Digit Left rid and Rotate Digit Right rrd - are for use with binary 
coded decimal and rotate a 4 bit digit in the a register with 2 digits at 
a memory location defined by hl. 


rid [7 DER a ea rrd (7413 i ee ER 


These can be demonstrated by using the erg display. Enter Id hl,35927 
Id thl),1 dd ayHeb rid (a=He@ (h1)=H1B) rid (a=H2) (h1)=H88). 


BIT MANIPULATION 


These represent the largest group of instructions (248 in all). They allow 
each bit of single byte registers cr any memory location to be switched to 
"1" (set), reset to "@" (res) or fecteil (bi). A major use is for flags 
where § different conditions can be recorded in a byte. The test 
instructions set the zero flag if a particular bit is zero. The codes are: 


set @y2 set Ob to set d,] set O,(hl) set @,(ixtD) set By, liytd) 
set 1 to set 7 res @ to res 7 bit @ to bit 7 
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The Spectrua ROM Software sakes ee use of these instructions in 
manipulating System Variables e.g. (iy+®) to (iy+3). Examples to try are - 
Id hy8 bit Soh (z on) set Syh bit Sah (2 off) ld iz 22528 (attributes) 
set 7,(ixtl) to flash res 7,{ixt1) for flash off. 


RESTART GROUP 


A set of 8 special instructions are available with the CPU chip which call 
Subroutines at addresses 8, 8, 16, 24, 32, 48, 48 and Sb. These have to be 

he for the functions required on a particular coaputer. In the 48K 
pectrum ROM they are: 


rst @ - causes a “NEW” 
Tst 8 - stops the program with an error code (see Spectrua Manual). 
rst 8;defb @ gives error 1, rst 83defb 18 error B etc. 


rst 16 - displays the character in the a register (see TESTING exaaples). 
rst 24 - associated with scanning a BASIC line - fetch (CH-ADD) to “a®. 
rst 32 - scanniny again but increment (CH-ADD) first. 

rst 46 - used with floating point calculator. 

rst 48 - creates workspace. 

rst 56 - maskable interrupt routine called 58 times per second to scan 


the keyboard and incresent the frame counter (see ia 1) 
INPUT AND OUTPUT 


Input and cutput instructions are the same as BASIC IN and OUT so the 
appropriate chapters of the Spectrum anual should be studied. The peri 
address is defined by a one byte variable N (data bits by a register) or 
the c register {data bits b register). Example prograes, given later, show 
how some of the instructions can be used. The codes are: 


in ay{N) in asc) to in d,{c) out (N)ya out (c)ya to out ic), 
Block input/output i5 provided, Similar to block transfer and search. 
Register hl gives the data address, c the port and b the number of bytes 
to transfer. The codes are ini inir ind indr cuti otir cutd ctdr. 
MISCELLANEOUS CPU CONTROL 
nop (code 8) does nothing, enabling unwanted codes to be poked with zeros. 
halt - suspends operation until the next interrupt. 
di ei - disable/enable interrupts, di inhibits nor@al keyboard scanning. 
ie 8 ia 1 im 2 - interrupt modes. Norgal operation is im 1 where rst 56 
1s executed automatically. Under ia @ external devices can execute 
instructions via the data bus. For ia 2 an indirect call is ade to an 
address defined by the i register and the 1/0 port. 
SUMMARY OF FLAGS 


When certain instructions are executed flags may be unchanged so the 
condition is preserved for later testing: 


No Flags changed - ld (except ld ayi or r)» 16 bit inc and dec, set, res 
push, pop and exchange (except af), jump, call, ret 
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SyZsp unchanged - add hl/ix/iys rlay rlca etc. (rl, 5] etc. do), cpl, scf 
c unchanged - inc, decy rlds rrds cpl, ins cut, Idi, ldd etc., bit 

c set to @ - and, or, xor, to 1 - scf 

h set te @ - ory xory rlay rl etc. ride scfs ims Idi, to 1 - ands cpl, bit 
n set to @ - adds adcy ands ory xory incs rly Sla etc., Scf, Idiybit 

nset to 1 - sub, sbc. decs cp, neg, cpl» cpis cpd etc. 

TIMING 


It is sometiges necessary to be able to detersine precise timings in a 
prograa such as when writing tapes priue YO music or moving a large 
nuaber of objects on the screen without flicker. fhe specification for the 
289-CPU includes any in the form of number of clock pulses or 7 states 
for each instruction. On the Spectrum the clock is about 3.55 MHz, givin 
around @.28 microseconds per | state. The shortest instructions take 4 
states and longest 23. Calculating timings based on T states i5 not 
particularly accurate and it is better tc do it by program (see poe 
prograa 1), Where timing is not too critical, an approxigation of 2.5 
@icroseconds per instruction can be used (488,908 per second). 


EXAMPLE PROBRAHS 


The following progrags show how most of the various types of instructions 
can be used and particularly in conjunction with Spectrum facilities. They 
should be assembled to address 53069. 


EXAMPLE 1 - Loops and instruction timing - For ue instruction timing a 
double pe is required. The outer loop to line 28 is controlled by de at 
4668 and the inner loop to 38 by b at 258, giving a total of 1 million 
passes. The system variable FRAMES, which is incremented at 5 times per 
seconds 15 initially set to @ and the time returned to BASIC via be at the 
end. The program can be run by entering CLS: PRINT USR 530@8/58 and will 
give an answer of about 3.78 {microseconds per loop). A suitable 
instruction or two for tiging (not changing b) should be inserted at line 
38, the program reassembled and run via PRINT USR 53888/50-3.78, for the 
time - Id asb gives about 1.16 and ld hl,1234 2.88 microseconds. 


18 REM ld hls@sld (23672) hlsld de. 4009 

2@ REM LOOP1sid by2S@spush de 

38 REM LOOP2;Insert instruction te be tiaed here 

48 REM djnz #00P2pop desdec desid asdsor e;jr nz,eLOOP! 
5@ REM 1d bc, (29672) ;ret 


A variation can be used for timing longer activities such a5 copying a 
full screen of data (188 times). The tiee for 1 screen in williseconds can 
be obtained by PRINT USR 53088/5, ee about 39.6. This indicates 
that, with data in the right order, the aaxieua rate of changing screens 
is about 25 per second. 


18 REM ld hls@sld (23672) shlsld a, 188 
269 REM LPs]d de,1638431d bc y6144:1dirsdec agjr nz,@LPsld be, (23672) sret 
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EXAMPLE 2 - Screen display and moving ob 
with the bare essentials. Five charac 


ject. The example shows one ways 
ters are defined at lines 738 to 


1178. These are copied to an area of memory defined at line 690 via line 


18. 
area, line 
cory three of the characters to a seaor 
with each ae § lines. Lines 48 and S# copy an 
to an area ATRI, for attribute ink/paper/bright of 
white /blue/1 (7+8+64), red/white/® (2+7*8), green/ 

yellow/B (4+6#8). 68-70 put the other 2 characters 
at the start of line 12 in PIC1. 88-118 set d as a 
delay count, hi as the address of line 12, ix as an 
area of memory, (ix)/(ixtl) as counters. 128-138 
produce the fuepiay via 608 with hl, be and de as 
defined above. The loop MVST repeatedly moves the 
object 241 bits across the screen, WALT goer non 
the speed. After each character bit slice, input a 

I of 6 to 9 or 8 stops the program. 


19 REM 1d des@CHRS1;1d hl,@CHARA O;1d be.4dsldir 
26 REM 1d hl,@PICIs{d as@ecall aFILL 

30 REM ld a,4scall aFILL 31d aylycall @FILL 

iG REM 1d hl,@ATRisld ay29scall QFILL 

50 REM ld asSSecall @FILL:id a,S2scall FILL 

6G REM Id hl,@PICtsid desd4sadd hlsde 

7 REM ld (hl) s2einc hsld (hl) s3 

BG REN ld d,32 

99 REM START;push de 
190 REM ST2s1d hl ,H4GBB;push hl 

118 REM ld ix,OPOSsld (ix)ydgld (ixtl) 241 
129 REM 1d hl.aPIC{s1d bcy@CHRSizld de,aATRI 

139 REM call aDISPLAY 


14@ REM op hl 

150 REM MVSTsdec (ixtl)sjr z)@ST2spush hl3id bd 
168 REM MOVEspush hlssrl (hl )sinc hiyrr (hl) 

17@ REM inc hlyrr (hl) spop hlsinc h 

189 REM ld aphscp Hods jr csaDJMsld hyH48 

190 REM ld ayltadd ayHeOsld Iya 

266 REM DIMsdjnz @MOVE;pop hl 
216 REM xor asrl (ix)jjr ncy@ 
2e8 REM Isld besHEFFEsin ay(c)scplsan 
238 REM WAIT: 1d bedspush desld e,@ 
249 REN Diisdec es jr nzy@DL{sdjnz aDLi 
250 REM jr @NVST 

26 REN STOPsret 

278 REM J: jr QSTOPsTeaporary line 

588 REM FILLs1d (ht) saspush hl;pop desinc de 

598 REM Id besesSsldirsinc hi;ret 

688 REM DISPLAY;push desld de, H4sée 

618 REM Eachcspush bespush hisld 1y(hl)sld hy@ 
b2G REM add hi,hlsadd hishlsadd hlyhlsadd hl sbc 
638 REM push desld by8 

649 REM Dchsld ay(hl)sid (de),asinc hl;inc d 

658 REM djnz pia desinc desld a,e;and a 

668 REM jr nz,@Nextc3ld asdsadd ay73ld dyascp HOB 
678 REM Nextcspop hlsinc hlspop bc; jr nz yaeachc 
68 REM pop hisld bcs 768;]dirsret 


spop de 
Tsinc hlsld (ix) y! 
d HIFs jr nzsaJ 
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If the characters were to be located in the user defined 
18 would have ld de, 65968 instead of @CHRS!. Lines 
area PIC1, defining a screens 


ae 
28 to 38 
equal number of bytes 


698 REM CHRSt:defs 4d 
708 REM FICI;defs 748 
718 REM ATRi:defs 748 
724 REN FOSsdefs 4 
738 REM CHARA 8 

748 REM def] 80100119 
758 REM def! 9110111 
769 REM defl @i111111 
778 REM defi O1iit111 
780 REM defi G1111119 
790 REM def1 11111188 
B09 REN defi 19901000 
819 REM def! oaggagad 
B28 REM CHARA 1 

a30 REM def! 90900008 
949 REM def! 08018080 
B58 REM def! 90101909 
860 REN def! 80019080 
B70 REM def! 19019100 
BBG REM det! 01011000 
B98 REM def! 06110909 
900 REM def! 99090808 
918 REM CHARA 2 

926 REM def! #0001111 
938 REM def! 69011011 
949 REN def! 00111011 
950 REM defl 1111111 
966 REM defi 11111111 
978 REM defi 11111111 
980 REM defl 11111111 
$98 REM def! 00111909 
1988 REM CHARA 3 

1019 REM defi 11119000 
1920 REN defi 11911008 
1938 REM defi 11011109 
1940 REM deft 11111118 
1958 REM defi 11111111 
1g6G REM defi 11111111 
187 REM defl 1itii11! 
1988 REM defl 9011108 
1898 REM CHARA 4 

1189 REM def! ggggagad 
1118 REM defi 3aggga0e 
1128 REM defi oaggaaas 
1138 REM defi 39090808 
1140 REM def1 99990000 
1158 REM def! segagae 
1168 REM defl 99800000 
1178 REM defi agoaegae 


In order to control the screen properly, it is essential that the 
addressing is understood. The first cWar acter in the oe memory starts 
at 16334 or Ha8@6, the second at H4@@i, third a dogs etc. The @ 
horizontal strips of the first line start at H4008, H4108, H4e88 to H4708 
and end at HA#iF to H471F: this is the reason that inc d i5 used at 448 
and inc h at 178. The second line is H482@ - H4@3F to H4729 - H473F so inc 
de or inc hl are used to step along characters and to the next line. This 
continues te the eighth line Hae ~ HOFF to H47E@ - H47FF. Lines 9 to 16 
follow a similar pattern with starting with H4d8e, H48e8 to H4BE@ and 
strips H48, 49, 4A to 4F. Lines 17 to 24 are HS88@ to HS@E@ and strips Hod 
to H5?. Changes after lines 8, 14 and 24 are dealt with at program lines 
658 to 678 when de becomes H4198, 4989 or S189. Attributes start at HSBGd. 


The following additions demonstrate keyboard or joystick operation. Input 
is obtained via line 228, using port address HEFFE (61438) for keys 6 to @ 
cr Spectrum joystick !. Addresses for other keys are given in the Spectrum 
manual {see tN). At 278, § or fire steps the program. Via CBB, joystick 
left or key 6 Slows down movement across the screen and right or } speeds 
it up by epang bo delay d. Down or 8 moves the object down and up or 9 
moves it up within the bounds of the middle third of the screen. 


278 REM Jscp dsjr z,@STOPsld cydsbit Oslixdsgr z,dJesld cy2 

298 REM Jasco 82 ir zdR:cp Losjr zyalspush descp Csr zy@UPscp 43 jr z,aDN 
318 REM OLZ;pop des jr 8WAlT 

308 REM Lsld as32scp d3jr zsa@WAlTsinc dsjr aWAlT 
338 REN R3ld as4scp dsjr z,@WAlTsdec d3jr aWAlT 
349 REM UPs 1d aslicp Hos n mic SURI s1d a, H48scp hs jr z,aDle 

368 REM UPL31d dyhsid 2, i3dec dsld asH473cp ds jr nz,oUPe 

370 REN ld ave;sub H2d;1d esarld dyH4F 

399 REM UP2scall aCOPY:push hisld by7 

499 REM UPSspush besid hsdyld {eesinc hyld asHo8scp hyjr nz.aUP4 

41 REM ld aylsadd ayH2Os1d lyasld hyH4d 

429 REM UP4:call aCOPYs op besdjnz SUP3;call] aBLANKspop hlsjr @DLe2 

4G REM DNeid aylscp HDF: yr nc, @DL2sld desH2Osadd hiydesex deshlsld bsB 
498 REM DNispush besld hydsld lyesdec hsld ayh47scp hyjr nzsaDNe 

50 REM Id aylssub He@sid lasld fyH4F 

318 REN DN2scall ocr vine besdjnz @DNiscall OBLANK;jr @DLe 

53a REM COPY;1d vr mee de 

548 REM CPisid ay (hi sid {de)sazince hlsinc desdjnz @CPispop hlspop desret 
540 REN BLANK:1d bycsid asd 
578 REM BLisld (de),asinc desdjnz @BLijret 


Sound can be included in the prograa by ne the following at WAIT, 
where the delay varies between about 48 and 5 milliseconds. a the 
port after each delay ate sound in the range 12.5 to 1@@Hz. The border 
can be flashed black/white by changing AND 16 to AND 23 and deleting OR 7. 


235 REM ld aylixt2)sxor 255;and losor 7yld (ixt2),a 
245 REM out (254)sa 


EXAMPLE 3 - Reading tapes. The following programs can be used to assist in 
hacking software supplied on tape. They aust not be used for illegal 
copying. The first program has three ea’ addresses: 53088 reads 
headers for interpretation by BASIC: 33804 loads BASIC programs and stops 
without pai any autostart LINE: 53808 loads BASIC as code for later 
interpretation. Headers are loaded to 54888 and code to 54108. In the 
prograg, ix defines the start address for loading and de the length. 
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All loading starts at ROM address HSS4 with the carry flag set and a=@ for 
a header of a=255 in other cases. BASIC and code are via W775 and HS86 


18 REM ld aylsjr @Start;Read headers 

2@ REM ld aycsjr abasic 

36 REM Ldcodes id ay3jload as code 

49 REM Startspush afsld ix,s48803call dHeadrspop af 

S68 REM cp tyret zs]d aye G3jr nz ,dLdcode 

58 REM Coderscfsld Oslixtl2)sld eslixtitield i%.S4188scall HBGssret 

7@ REM Basic3ld besd4srst ele GespOp xpd (ix) Bgld (intl) 255 

BG REM Id hl,(23641)34d dey (29695) sscfesbe hledesld (ix+11)ylgld (ixt2) yh 
58 REM gust deyld beel?sadd ixsbe 
188 REM HeadBycal] dHeadrsid as(ix)scp 83 jr nz,eHeadB 

119 REM Jd (ix+14),!28;No line noid ayl3ld (23668).a3 jp H775 
129 REM Headrspush ixstd desi7sxor ayscfscall] HSSdspop is3jr ncyaHeadrsret 


oS REM the following runs the above to read BASIC and code headers 
18 LET bc=USR 53888: REM Read header, pees BREAK to stop 

28 FOR i=54881 TO 54818: PRINT CHR PEEK is: NEXT i: REM nage 

36 IF PEEK 54888=@ THEN PRINT " B "3: GO TO 198: REM BASIC 

46 IF PEEK 5488d=3 THEN PRINT " C "3:GD TO 78: REM Code 

3@ PRINT: GO TO 18: REM 54889=1/2 are no./chara arrays, length s4aii/te 
78 PRINT PEEK S4@id+2Sb#PEEK S4014;",":FEEK S4811+25o#PEEK S4oie 

B@ GOTO 18: REM Prints start address, length (16384 = SCREENS) 
180 LET 1=PEEK 54914: IF 1=128 THEN PRINT * None";: 60 7D 12@ 
118 FRINT " "sl¥2S6+PEEK 548135: REM Autogatic start line nuaber 
128 PRINT " "PEEK SUBLI+P544PEEK S4O12:" "sPEEK S4AIS+25b¥PEEK 54016 
138 G0 TD 18: REM above give length (PROS) to (E LINE) and (VARS) 


Many gages will give headers and a BASIC loader as basic B @ 128 128 
shown on the right, loading a screen, attributes and screen C 16384,691¢ 
code to fill uP the aemory. The program is started fate C 28088,37536 
at line 1@ on loading and starts the game with the @ CLEAR 27999 

USR. To copys change the basic if required, e.g. to 28 LDAD "* CODE 

load from disk including nages in loads and save by 38 LOAD ““ CODE 

SAVE "basic" LINE 8. ae the loader to as it was 48 GO 70 USR 2b886 
delete the USR statement (and INKs etc.). add SAVE 

statements after the LOADS, with appropriate start addresses and lengths, 
and RUN to load the tape and save where ever. A variation of the above pay 
have loading addresses with LOAD CODE which are different to the headers. 


Most 2a ar set PAPER and INK on starting to make the listing invisible 
on nor@al loading. A variation which can prevent the above from giving a 
roper listing is to include control codes # to 31 in the BASIC lines. 
ype ina program 1@ ::LET a aaa 23b35+25b#PEEK 236396:PRINT prog. RUN 
to print the start address of the prograa, then POKE,progtl,@ to aake the 
line nuaber 9. Listing will appear correct on a 48K system but, on the 
128K, the Jine number will not be given and the line will] apreae several 
times. RUN and note that it still works. Then POKE progt4,17:PDKE progti.d 
to change the two colons to PAPER 8. The listing 15 then blacked out, 
although the display may not change on the 128K system. In order to crack 
these, the programa can be loaded and a loop typed in to peek and print 
fros (PROG) to (VARS). In order to understand the format, the Spectrua 
manual should be studied. The games driver can then be reloaded and 
offending characters poked with 32 (space) and a suitable line nusber 
inserted to give a proper listing. 
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Headers as on the right indicate that BASIC variables basic B 8 234 i22 
are present. Assuging these are used in the program codel C 28808,37536 
and the USR address is in the main code, the method code@ C 23333,28 
used for the previous example may be satisfactory but 

60 70 should be used instead of RUN to avoid losing the variables. The 
last code is loaded to the printer buffer area which could cause a problem 
on 128K systems. If it does, it may be possible to transfer it to the 
screen memory until sean is finished: e.g. change the USR address to 
16384 and add the code at CODE after the following new proavar which 
should be loaded to 16384 - ld hl, a@CODEsid de,233da3ld besedsidir;jp cboee 


St with headerless loaders may indicate only a basic B18 358 160 
BASIC header and have a program pccluerly a5 shown 18 CLEAR 2o8a8 
here, indicating machine code in the variables area, 28 PRINT USR 23958 
or embedded in a BASIC line, with slightly different 

fumbers. The address of {PROG) should be noted and a code file saved 
Starting from this address with Ht hag a5 indicated in the header. This 
can then be loaded later for disassembly. 


In many cases the code is likely to use normal ROM routines around 
addresses HS56 to Hs (1366-2848) for loading, ee ix; a and de as 
described above, followed by a juap to the start address (or e.g. ld 
hl,35@88spush hls jp H556 to pick up the start by the return at the end of 
the loading routine). In this case it is aes pasy to produce a new 
loader to read each section of tape in turn, to enable a copy to be made 
using normal save with headers. 


Other loaders may use non standard code and have no ROM calls. These can 
be identified by having out (254);a instructions for flashing the border 
and Jd a,127;in a,(254), or the in ry{c) equivalent for loading. Assuming 
standard ae techniques are to be used, it may not be necessary to 
determine how the loading works, but the ending procedures and any special 
variables used. will have to be found. The loader code should be acdified 
using BASIC POKEs, direct input with TEST or fe newly assembled code 
to make it interruptible so the real code can be Icaded and copied. 


In returning to a BASIC Joader for different sections of code being 
copied, it must be ensured that overwriting does not take place of Syste 
Variables, the Lei ag and variables area, the stack (normally just below 
RAMTOP) or the printer buffer on +3 systems. Once in sachine code, with no 
return to BASIC, these areas can be overwritten, if this is done in the 
original program. It should normally be possible to transfer the final 
parts of code via the display semory, aS shown above. 


A particular thing to watch out for in the @achine code loaders are 
instructions which move the stack e.g. ld ae er ld sp,23538. A return 
to BASIC cannot occur if this is done and these new stacks are often in 
the print buffer area. The creation of these stacks should be deferred to 
after the last stage of loading when they aay again be handled via the 
memory display. 


The final exaaple is for dealing with long pieces of code e.g. with a 
header - prog C 23552,41984 indicating loading from the start of System 
Variables to the end of memory with the start address on a stack within 
the code loaded or in the printer buffer. Alternatively, a small amount of 
code may be first loaded to the top of memory and used to control the 
remaining loading. 
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This pepgias copies loading code from ROM 
into the progras area. Lines 48 to 48 are 
as in ROM but not copied due to the jp 
instruction. Rdl is called and stops with 
a tape loading error message if reading 
15 incorrect. The idea 15 to load code in 
pains the lengths defined yy Leni/2. If 

115 1 the code is loaded trom 28889 to 
65535 then to ROM addresses which are not 
changed. The first part of code can then 
be saved. With Fl=@ loading of the second 
part starts at 28968. The code should be 
assembled for address 27888 and saved. It 
is driven by the following BASIC progras. 
The exasple shown is for code starting at 
23552e. The first part to be saved is up 
to address 27999 and the second to its 
Teal address of 28088. This can be loaded 
We but the first part may need to 
be via the 


18 REN Id hl,HSSh31d de,@Rde 
12 REM 1d be, fiésidirscall oRd! 
14 REM ret carst Bidefb 2b 

26 REM Rdl:ld ixy2800831d 2,255 
22 REM ld de,{alent)sand a;scf 
38 REM Rd2sdefs 116 

49 REM Rd3scall HSE3sret nc 

42 REM ld ayHCBscp bsrl | 

44 REM 1d bsHBO;jp nc aRd3 

46 REM Id ayhsxor l3ld hya 

48 REM ld aydsor esjr nz,c62 
58 REM id de, (aLend) sid ay (@Fl) 
68 REM cp 8; jr nz,@Parte 

62 REM ld ix, 28809 

78 REM Part2s jp HOA? 

89 REM Lent:defw 1 

Be REM Lene;defw i 

96 REM Fl;defb 


screen display with code to transfer it added a5 shown earlier. 


18 LET fl=i: LET a=4448: LET b=375396: LET c=INT (a/256): LET d=INT (b/256) 
28 POKE 27984,a-256#c:POKE 27905,c:POKE 27986,b-25b#d:POKE 27987,d 


38 POKE 27988, f1: PRINT USR 27880: STOP 


5@ CLEAR 27799: LOAD "rdbin* CODE 27888: STOP 
69 REM fl=1 save CODE 28998,a: f1=0 save CODE 28986,b 


EXAMPLE 4 - 128K RAM bank switching. The Spectrum manual describes memory 


bank switching. 
BASIC displays 8 screens, Ail 
where, for 931,3,4,6,7, a differen 
contents are copied along 
switched back in. 
banks 


be 


with attributes. 
Calling START2 {LET u=USR 48929) switches the aesory 
in and copies the stored contents back to the screen: this is 
pepeaied 25 times. Calling STARTS (USR 48865) switches the screen display 

ween the noraal one and the alternative in bank 7, without switching 


The following shows how it is done in machine code. The 
the nuaber to BANKN and calling START 
gemory bank is switched in and screen 


The normal bank is then 


the bank within the normal addressing range: this 15 repeated 65536 times 
in 3.5 seconds. The program should be assembled for address 49998. 


10 REM BANKMsdefLi@ 23388 

26 REN PORTI:defLed 32765 

30 REM BANKN:detb @ 

4@ REM STARTsId a,(@BANKN) scp 8 
3@ REM ret ncscall @CHEKsret z 
6@ REM or 1scall aSWITCH 

79 REM Id hly16384s1d de,49152 
QG REM 1d bey6912sidirs jr dEND 
99 REM START2:1d 6,25 
109 REM LOOPspush besld a,8 
119 REM Lisdec ajpush af 
129 REM call aCHeKsjr 2,08 

139 REM or i43call @SWITCH 

148 REM Id de,1o3B4s1d h1,49152 


150 REM Id bcy69123]dir 
168 REM baa af; jr nz,all 
178 REM ee c 

186 REM ST 
199 REM LOOP2 

208 REM ld ay24;call aSWITCH 

219 REM Id a,loscall a@SWITCH 
228 REM dec desid a,dsor e 

239 REM jr nz,aLOOP2 

24g REM END: 1d ay16 

25 REM SWITCHsdi:ld bc,@PORT! 
2o8 REM Id (@BANKM) ,asout (c) ya 
279 REM eisret 

288 REM CHEK scp 2sret zicp Ssret 


ydjnz aLOOP; jr dEND 
RT3;1d desd 


19 FOR I=8 to 7: CLS: FOR j=1 to 21: PRINT TAB eres 7-1; INK 1; "Hee" 


28 NEXT j: POKE 40606,i:LET u=USR 48001:NEXT i: ST 
48 CLEAR 39999:LDAD "ramsw.bin" CODE 49980 
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